This diagram shows how certificate authentication is handled from the point where the user device enrolls into Workspace ONE UEM to when the user begins to receive email.

Certs_EAS_ADCS_01